Signing-in to software applications having secured features

• US 8,024,781 B2
• Filed: 12/04/2002
• Issued: 09/20/2011
• Est. Priority Date: 12/04/2002
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Saunders, Stillman T., Coloma, Ignacio Ariel, Gupta, Vishal
• Primary Examiner(s): Lipman, Jacob
• Application Number:
  US10/309,650
• Publication Number:
  US 20040111620A1
• Time in Patent Office: 3,212 Days
• Field of Search: 726 5- 9
• US Class Current: 726/5
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2147 Locking files

Abstract

The present invention automatically signs or logs a user in to access secured features within a software application without prompting manual intervention when a user starts the software application having secured features. When the software application is started and an automatic sign-in condition is enabled, the software application transitions to a signed-in or logged-in state as long as security criteria are met. As a result, unnecessary and repetitive steps are avoided when signing-in. The automatic sign-in condition may be enabled through initial system setup, from a prompt to enter a credential, or through a service options menu. The present invention improves network efficiency by limiting network transmissions to an as needed basis. The automatic sign-in condition is capable of roaming to other computers within a network, thereby following mobile users. Further, the automatic sign-in condition is controllable by network administrative policy, giving network administrators the ability to disable its functionality when desired.

Claims

1. A method for signing-in to a software application, wherein the software application has one or more secured features, comprising:

enabling, on a client computer, an automatic sign-in condition in the software application to allow the software application to automatically transition to a signed-in state when one or more security criteria are satisfied, the automatic sign-in condition being enabled upon at least one of initial system setup of the client computer and through a service options menu on the client computer, the service options menu comprising an interface displaying a field for a user name, a field for an option to save a password and a field for an auto-sign in option;

starting the software application without prompting action on the part of a user when in the automatic sign-in condition;

detecting whether one or more security criteria are satisfied when the software application is started and is in the automatic sign-in condition; and

in response to at least one of the one or more security criteria being satisfied, automatically transitioning the software application to the signed-in state without prompting action on the part of the user when in the automatic sign-in condition and granting the software application access to the secured features, wherein the security criteria comprises a key, associated with a user profile, being set to enable the automatic sign-in condition and a credential associated with the user being stored in a credential manager, the key being associated with the user profile to provide roaming characteristics utilized to allow the user to access secured features from a plurality of network client computers, the roaming characteristics enabling the automatic sign-in condition to roam between the plurality of network client computers without the user being required to reenter the credential to access the secured features of the software application.

2. The method of claim 1, wherein one of the one or more security criteria being satisfied is a network connection being detected.

3. The method of claim 1, wherein the one or more security criteria being satisfied includes no other software application having secured features being in a running state when the software application starts.

4. The method of claim 1, wherein the one or more security criteria being satisfied includes a lock being used to prevent simultaneous sign-in of two or more software applications.

5. The method of claim 1, wherein the one or more security criteria being satisfied includes the automatic sign-in condition being enabled by a system administrative policy.

6. The method of claim 1, wherein the one or more security criteria being satisfied includes a credential being stored to sign-in for access to the secured features of the software application.

7. The method of claim 1, wherein the one or more security criteria being satisfied includes authenticating the credential and the credential being valid.

8. The method of claim 1, wherein the security criteria comprises:

a network connection being detected;

a lock being used to prevent simultaneous sign-in to two or more software applications;

the automatic sign-in condition being enabled by a system administrative policy;

a credential being stored to sign-in for access to the secured features of the software application; and

authenticating the credential and the credential being valid.

9. The method of claim 1, wherein the software application is part of a suite of two or more software applications having secured features, wherein an operating system supports the automatic sign-in condition, and wherein the security criteria further comprises no one or more other software applications within the suite being in a running state when the software application starts.

10. The method of claim 1, wherein the automatic sign-in condition may be disabled by the system administrative policy.

11. The method of claim 1, wherein the secured features comprise one or more host websites and one or more host services.

12. The method of claim 1, further comprising:

receiving a request to access the secured features within the software application;

in response to the request, transmitting authentication information and accessing the secured features.

13. The method of claim 12, wherein authentication information comprises an encrypted cookie received from an authentication server.

14. The method of claim 1, wherein enabling an automatic sign-in condition comprises:

receiving a request to display the service options menu;

displaying the service options menu;

receiving a request to hereafter automatically sign-in for access to one or more secured features within one or more software applications;

displaying a request for a credential;

receiving the credential for signing-in to access the secured features within the software application;

authenticating the credential and detecting whether the credential is valid; and

in response to detecting that the credential is valid, storing the credential in a credential manager and activating the key.

15. The method of claim 14, wherein the request to hereafter automatically sign-in comprises an option that allows the password to be saved and an option that allows the user to be automatically signed in and affirmed by the user within the service options menu.

16. The method of claim 14, further comprising:

displaying an option to change the credential;

receiving a request to change the credential

in response to receiving the request to change the credential, displaying a request for a different credential;

receiving and storing the different credential for signing-in to access the secured features of the software application;

in response to receiving the different credential, removing the credential; and

storing the different credential as the credential.

17. The method of claim 16, wherein the credential is stored in an encrypted format.

18. The method of claim 1, wherein enabling the automatic sign-in condition comprises the operations of:

receiving a request to access the secured features within the software application;

displaying a request for a credential;

receiving the credential for signing-in to access the secured features of the software application;

receiving a request to hereafter automatically sign-in for access to one or more secured features within one or more software applications having secured features;

authenticating the credential and detecting whether the credential is valid; and

in response to detecting that the credential is valid, storing the credential in the credential manager and activating the key.

19. The method of claim 18, wherein the request to hereafter automatically sign-in comprises the user clicking a checkbox to make the request automatic.

20. The method of claim 18, wherein the credential is stored in an encrypted format.

21. The method of claim 18, wherein the credential comprises the user name and the password.

22. The method of claim 21, further comprising:

activating an interface of the software application to indicate a signed-in state;

sending one or more messages indicating that an automatic sign-in has occurred; and

releasing use of the lock.

23. A computer storage medium readable by a computing system and encoding instructions for executing a computer process for logging in to a software application, wherein the software application has one or more secured features, said computer process comprising:

enabling, on a client computer, an automatic sign-in condition in the software application to allow the software application to automatically transition to a signed-in state when one or more security criteria are satisfied, the automatic sign-in condition being enabled upon at least one of initial system setup of the client computer and through a service options menu on the client computer, the service options menu comprising an interface displaying a field for a user name, a field for an option to save a password and a field for an auto-sign in option;

launching the software application without prompting action on the part of a user when in the automatic sign-in condition;

determining whether one or more security criteria are satisfied when the software application is launched and is in the automatic sign-in condition; and

in response to at least one of the one or more security criteria being satisfied, automatically transitioning the software application to the signed-in state without prompting action on the part of the user when in the automatic sign-in condition and granting the software application access to the secured features, wherein the security criteria comprises a key, associated with a user profile, being set to enable the automatic sign-in condition and a credential associated with the user being stored in a credential manager, the key being associated with the user profile to provide roaming characteristics utilized to allow the user to access secured features from a plurality of network client computers, the roaming characteristics enabling the automatic sign-in condition to roam between the plurality of network client computers without the user being required to reenter the credential to access the secured features of the software application.

24. The computer storage medium of claim 23, wherein the automatic sign-in condition may be disabled by a system administrative policy.

25. The computer storage medium of claim 23, wherein the computer process further comprises:

receiving a request to access a secured feature within the software application and in response to the request, transmitting authentication information and accessing the secured feature.

26. The computer storage medium of claim 23, wherein the enabling operation of the computer process comprises:

receiving a request to access the secured features within the software application;

displaying a request for a credential;

receiving the credential for signing-in to access the secured features of the software application;

receiving a request to hereafter access one or more secured features of one or more software applications, by launching the software applications;

authenticating the credential and detecting whether the credential is valid; and

in response to detecting that the credential is valid, storing the credential in the credential manager and activating the automatic sign-in key whereby the automatic sign-in condition is enabled.

27. The computer storage medium of claim 26, wherein the credential is stored in an encrypted format and wherein the automatic sign-in key is written in home HKEY current user.

28. The computer storage medium of claim 26, wherein the request to hereafter automatically sign-in comprises the user clicking a checkbox to make the request automatic.

29. The computer storage medium of claim 26, wherein the request to hereafter automatically sign-in comprises an option that allows the password to be saved and an option that allows the user to be automatically signed in after being activated by the user within a service options menu.

30. The computer storage medium of claim 23, wherein the security criteria comprises:

a network connection being detected;

a lock being used to prevent simultaneous sign-in to two or more software applications;

the automatic sign-in condition being enabled by a system administrative policy;

a credential being stored to sign-in for access to the secured features of one or more software applications; and

authenticating the credential and the credential being valid.

31. The computer storage medium of claim 30, wherein the software application is part of a suite of two or more software applications having secured features, wherein an operating system supports the automatic sign-in condition, and wherein the security criteria further comprises no one or more other software applications within the suite being in an open state when the software application starts.

32. The computer storage medium of claim 30, wherein the credential comprises the user name and the password.

33. The computer storage medium of claim 30, further comprising:

changing an interface of the software application to indicate a signed-in state;

sending one or more messages indicating that an automatic sign-in has occurred; and

releasing use of the lock.

34. A method for automatic login to access one or more secured features within a software application comprising:

authenticating, on a client computer, an automatic login condition in the software application to allow the software application to automatically transition to a signed-in state when one or more security criteria are satisfied, the automatic login condition being enabled upon at least one of initial system setup of the client computer and through a service options menu on the client computer, the service options menu comprising an interface displaying a field for a user name, a field for an option to save a password and a field for an auto-sign in option;

launching the software application without prompting action on the part of a user while in the automatic login condition;

detecting whether one or more automatic login criteria are satisfied when the software application is launched and is in the automatic login condition; and

in response to at least one of the one or more automatic login criteria being satisfied, automatically transitioning the software application to the signed-in state without prompting action on the part of the user when in the automatic sign-in condition and granting the software application access to the secured features, wherein when the automatic login condition is enabled, a key, associated with a user profile, is set and a credential associated with the user is stored in a credential manager, the key being associated with the user profile to provide roaming characteristics utilized to allow the user to access secured features from a plurality of network client computers, the roaming characteristics enabling the automatic sign-in condition to roam between the plurality of network client computers without the user being required to reenter the credential to access the secured features of the software application.

35. The method of claim 34, further comprising:

receiving a request to access a secured feature within the software product;

in response to the request, transmitting authentication information and accessing the secured feature.

36. The method of claim 34, wherein the one or more automatic login criteria comprises:

a network connection being detected;

a lock being acquired to prevent simultaneous login of two or more secured applications;

the automatic login condition being enabled by a network administrative policy;

a credential being stored to login for access to the secured features of the software application; and

authenticating the credential and the credential being valid.

37. A system for signing-in to a software application, wherein the software application has one or more security criteria and one or more secured features, comprising;

a memory unit storing an authenticated sign-in condition; and

a processing unit enabling, on a client computer, an automatic sign-in condition in the software application to allow the software application to automatically transition to a signed-in state when one or more security criteria are satisfied, the automatic sign-in condition being enabled upon at least one of initial system setup of the client computer and through a service options menu on the client computer, the service options menu comprising an interface displaying a field for a user name, a field for an option to save a password and a field for an auto-sign in option, starting the software application without prompting action on the part of the user when in the automatic sign-in condition and detecting whether one or more security criteria are satisfied when the software application is started and is in the automatic sign-in condition, and in response to at least one of the one or more security criteria being satisfied, the processing unit automatically transitioning the software application to the signed-in state without prompting action on the part of the user when in the automatic sign-in condition and granting the software application access to the secured features, wherein when the authenticated sign-in condition is enabled, a key, associated with a user profile, is set and a credential associated with the user is stored in a credential manager, the key being associated with the user profile to provide roaming characteristics utilized to allow the user to access secured features from a plurality of network client computers, the roaming characteristics enabling the authenticated sign-in condition to roam between the plurality of network client computers without the user being required to reenter the credential to access the secured features of the software application.

38. The system of claim 37, further comprising:

a display unit to indicate the signed-in state and network activity